JN0-635 Online Practice Questions and Answers

Which interface family is required for Layer 2 transparent mode on SRX Series devices?

A. LLDP

B. Ethernet switching

C. inet

D. VPLS

Click the Exhibit button.

Referring to the exhibit, which statement is true?

A. ARP security is securing data across the control interface

B. IPsec is securing data across the control interface

C. SSH is securing data across the control interface

D. MACsec is securing data across the control interface

Click the Exhibit button.

You are asked to look at a configuration that is designed to take all traffic with a specific source IP address and forward the traffic to a traffic analysis server for further evaluation. The configuration is not working as intended.

Referring to the exhibit, which change must be made to correct the configuration?

A. Apply the filter as an input filter on interface xe-0/2/1.0

B. Create a routing instance named default

C. Apply the filter as an input filter on interface xe-0/0/1.0

D. Apply the filter as an output filter on interface xe-0/1/0.0

When would you use the port-overloading-factor 1 setting?

A. to enable the port-overloading

B. to disable the port-overloading

C. to map ports with 1:1 ratio for port-overloading

D. to set the maximum port-overloading capacity to 65,536

Which Junos security feature is used for signature-based attack prevention?

A. RADIUS

B. AppQoS

C. IPS

D. PIM

Click the Exhibit button.

Given the command output shown in the exhibit, which two statements are true? (Choose two.)

A. The host 172.31.15.1 is directly connected to interface ge-0/0/3.0

B. Traffic matching this session has been received since the session was established

C. The host 10.10.101.10 is directly connected to interface ge-0/0/4.0

D. Network Address Translation is applied to this session

Click the Exhibit button.

You have two hosts on the same subnet connecting to an SRX340 on interfaces ge-0/0/4 and ge-0/0/5. However, the two hosts cannot communicate with each other.

Referring to the exhibit, what are two actions that would solve this problem? (Choose two.)

A. Set the SRX340 to Ethernet switching mode and reboot

B. Add an IRB interface to the VLAN

C. Put the ge-0/0/4 and ge-0/0/5 interfaces in different VLANs

D. Remove the ge-0/0/4 and ge-0/0/5 interfaces from the L2 security zone

Click the Exhibit button.

You have configured an ADVPN that is operational. However, OSPF will not establish correctly across the ADVPN tunnels.

Referring to the exhibit, which two commands will solve the problem? (Choose two.)

A. [edit protocols ospf area 0.0.0.0] user@srx# set interface st0.0 dynamic-neighbors

B. [edit protocols ospf area 0.0.0.0] user@srx# set interface st0.0 topology advpn

C. [edit protocols ospf area 0.0.0.0] user@srx# set interface st0.0 interface-type nbma

D. [edit protocols ospf area 0.0.0.0] user@srx# set interface st0.0 demand-circuit

You issue the command shown in the exhibit.

Which policy will be active for the identified traffic?

A. Policy p4

B. Policy p7

C. Policy p1

D. Policy p12

Which three type of peer devices are supported for Cos-Based IPsec VPN?

A. High-end SRX Series device

B. cSRX

C. vSRX

D. Branch-end SRX Series devics